What | Removed | Added |
---|---|---|
CC | security-team@suse.de | |
Flags | needinfo?(security-team@suse.de) |
(In reply to Ansgar Esztermann from comment #3) > Upstream installs $CHECKRESULTDIR with setgid $command_grp (so when nagios > creates the named pipe, it is owned by group nagcmd automatically), but we > don't. > > Unless there's some compelling reason not to, I'd prefer reverting to > upstream behaviour here. However, this must not be done in %post. Instead, > the %attr entry needs to be changed. If there are no objections, I'll create > an SR. Absolutely fine with me. Let's add security here to also have a look and give their ok.